Where does my data live and who can access it?

Your data lives in your own isolated Supabase database project. No one shares it. Fulcrum staff cannot access it without an active service session, and that access is revoked when the engagement ends.

Here is the architecture in full.

Your isolated tenant environment

Vantage deploys a separate Supabase project for each client. Your data is not stored in a shared database with other clients. Your knowledge base does not contribute to any shared model. The tenant is provisioned in your organization’s name, and you have owner-level access throughout.

Where data at rest lives

All data is stored in Supabase (SOC 2 Type II certified). Credentials, API keys, and authentication tokens are stored in Supabase Vault — encrypted at rest, not accessible in plaintext to Fulcrum staff under normal operating conditions.

Who can access your data

You and members of your organization: always. You hold owner-level credentials to your Supabase project.

Fulcrum staff: only during an active service session, using a service account credential scoped to the operations required for that session. No Fulcrum staff member has persistent, unrestricted access to client data outside of active sessions.

Anyone else: no. Your data is not accessible to other Fulcrum clients, to third-party vendors, or to any party not explicitly authorized by you.

What data Fulcrum collects and processes

Fulcrum processes the data you authorize us to connect: CRM records, activity history, and any additional data sources agreed to in the setup. We do not collect email content, calendar data, financial records, or any data outside the authorized scope.

What happens at the end of the engagement

Fulcrum revokes its own service account. You retain full access to your Supabase project, your data, and everything we built. Nothing is deleted on our end until you trigger the formal offboarding process.

---

Connected questions:

• Is Vantage HIPAA compliant?
• What happens to my data if I cancel?
• Can my IT director review the security architecture?

Related: Vantage security architecture · What happens to your data if you cancel · Is Vantage HIPAA compliant